Detections
Analytics

UBTU-16-010790 - Local initialization files must not execute world-writable programs.

Information

If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set the mode on files being executed by the local initialization files with the following command:

# chmod 0755 <file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215011r610931_rule, STIG-ID|UBTU-16-010790, STIG-Legacy|SV-90253, STIG-Legacy|V-75573, Vuln-ID|V-215011

Plugin: Unix

Control ID: ac34b6048d885d9ba0a44385959dd3ae11fd65823540e0748ca4dbf9a46d473d